42856 matches found
CVE-2026-9899 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X494-MJ8G-CJ27 vulnerabilities
Vulnerabilities for packages: cargo-audit, cargo-c, codex...
CVE-2026-28969
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system...
CVE-2026-28987
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to leak sensitive kernel state...
CVE-2026-28974
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause a denial-of-service...
CVE-2025-15622
Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client reveals plaintext OAuth2 client secretDesktop client decodes the secret and uses the plaintext secret to exchange it into an access and id tokens as part of the OpenID authentication fl...
CVE-2025-62305
HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information. Such behaviour may allow exposure of data to external systems under specific conditions...
CVE-2026-45222
Summarize versions through 0.14.1, fixed in commit 0cfb0fb, creates the daemon configuration directory and file with default filesystem permissions that may be world-readable on Unix-like systems, allowing local attackers to read bearer tokens and API credentials stored in /.summarize/daemon.json...
CVE-2026-40136
SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions temporarily preventing access. However, the application itself cannot be compromised resulting in a low impact on availability. There is no impact on confidentiality and integrity ...
GHSA-PFR6-J3GF-9M85 vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-25-openj9...
GHSA-3FX3-QCJV-QR6H vulnerabilities
Vulnerabilities for packages: openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-25-openj9...
GHSA-5XRQ-8626-4RWP vulnerabilities
Vulnerabilities for packages: langfuse, gitlab-rails-ce, langfuse-fips, gitlab-rails-ce-fips, vitess...
CVE-2026-10016 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9883 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9885 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9889 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9908 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9909 vulnerabilities
Vulnerabilities for packages: chromium...